What is an example of a cross-site request forgery attack?

The correct answer is A. forcing an existing authentication end user to perform unwanted actions on a web application. A cross-site request forgery (CSRF) attack tricks an authenticated user into performing unwanted actions on a web application without their knowledge or consent. For example, an attacker could use a forged request to transfer funds or change account details, exploiting the…

Application Deployment and Security

Question

Options

Aforcing an existing authentication end user to perform unwanted actions on a web application
Bcompromise of passwords, keys, or session tokens, or exploitation of other implementation flaws
Cwhen untrusted data is sent to an interpreter as part of a command or query
Dwhen unencrypted electronic documents that contain sensitive data are altered

How the community answered

(21 responses)

A
90% (19)
B
5% (1)
C
5% (1)

Explanation

A cross-site request forgery (CSRF) attack tricks an authenticated user into performing unwanted actions on a web application without their knowledge or consent. For example, an attacker could use a forged request to transfer funds or change account details, exploiting the trust the application has in the user's browser.

Topics

#CSRF#Web Security#Application Security#Security Attacks

Community Discussion

No community discussion yet for this question.

Full 200-901 Practice